Joint advisory AA25-239A: Chinese state actors compromise global networks to feed an espionage system

Summary

Bottom line: the Cybersecurity and Infrastructure Security Agency^Bio, National Security Agency^Bio, Federal Bureau of Investigation and international partners describe People's Republic of China actors sitting on backbone routers of telecommunications, government, transportation, lodging and military networks. Treat edge routing infrastructure as the primary hunt surface.

Key claims· extracted from reporting

• Bottom line: the Cybersecurity and Infrastructure Security Agency, National Security Agency, Federal Bureau of Investigation and international partners describe People's Republic of China actors sitting on backbone routers of telecommunications, government, transportation, lodging and military networks.Low · 10%
  named entity×9
  - Source: CISA / NSA / FBI joint advisory AA25-239A
• Treat edge routing infrastructure as the primary hunt surface.Low · 10%
  named entity
  - Source: CISA / NSA / FBI joint advisory AA25-239A

Heuristic extraction, verify against the original report before citing.

Tags· click to alert

1. Jan 17, 2025·highUS Department of the Treasury

   Treasury sanctions Sichuan Juxinhe Network Technology over Salt Typhoon telecom intrusions
2. Jan 17, 2025·highAssociated Press

   Associated Press: Treasury sanctions follow the telecom hack and the breach of its own network
3. Feb 13, 2025·mediumWIRED

   WIRED: Salt Typhoon keeps hacking telecoms despite sanctions
4. Mar 5, 2025·mediumCyberScoop

   CyberScoop: twelve Chinese nationals indicted over a hacker-for-hire espionage spree
5. Aug 27, 2025·criticalcurrentCISA / NSA / FBI joint advisory AA25-239A

   Joint advisory AA25-239A: Chinese state actors compromise global networks to feed an espionage system